Skip to main content
MadDog_2023
Explorer
March 1, 2024
Question

Wireless connected devices send traffic over wireless controller

Hi All,

In the organization WIFI is controller by FortiNet WLAN Controller (MC1550).

 

image_2024-03-01_130958232.png

 

It was noticed that devices connected to Wi-Fi send traffic over WLAN controller and not directly via default gateway.

 

image_2024-03-01_131319688.png

 

Is it normal for FortiNet wireless controller to act as a router?

If yes could you please help to set up a static route.

There is an IPSec VPN tunnel between the office and the environment in Azure and devices conencted to wi-fi can't communicate with Azure infrastructure as the wireless controller seems doesn't know where to forward traffic. 

 

fortinet2.jpg

 

I can confirm that for the wireless network 192.168.9.0 the default gateway IP is 192.168.9.5.

I also tried to add static route manually route -p add 10.55.35.0 mask 255.255.255.0 192.168.9.5 but that didn't help either.

5 replies

Hong_FTNT
Staff & Editor
Staff & Editor
March 1, 2024

Hi @MadDog_2023,

 

Traffic should go to the default gateway unless you have a specific route to 10.55.35.0/24. Please check your routing-table by running "route print". You also need to create rules to allow traffic on the WLC.

 

Regards, 

MadDog_2023
Explorer
March 1, 2024

Hi @hbac 

As I mentioned I added route manually route -p add 10.55.35.0 mask 255.255.255.0 192.168.9.5 on a desktop but traffic still goes through wireless controller. 

192.168.9.5 is a default gateway.

192.168.9.XXX is the IP address of the desktop.

 

You also need to create rules to allow traffic on the WLC.

Where do I do that?

 

P.S. On the FortiGate router there is a route that send traffic to 10.55.35.0/24 over VPN to Azure. It is just for some unknown reason the wireless controller send traffic through itself which I've never seen before. If it is how FortiNet Wireless Controller works then there should be an option to add a route.

Hong_FTNT
Staff & Editor
Staff & Editor
March 2, 2024
MadDog_2023
Explorer
March 13, 2024

Hi All,

 

Can someone please help me with this.

With all the pleasure I would get rid of that FortiNet Controller and replace with something else but it will take some time and for now I need to set up a static route.

 

No idea why that controller acts as a router but that's another story. 

 

Thanks in advance.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT